Privacy Policy

Effective date: 2026-07-14

SoloOps (the "Company"), which operates Daily Video Digest (the "Service"), complies with the Personal Information Protection Act (개인정보 보호법) and other applicable laws, and establishes the following Privacy Policy.

Article 1 (Categories of Personal Information Collected) 1. Google sign-in: name, email address, profile identifier. 2. Collected or generated in the course of using the Service: subscribed channel information (URL, alias, category, etc.), delivery settings (recipient email address, delivery time, breaking-news keywords, delivery method), messenger integration identifiers (e.g., Telegram chat ID), summary delivery records and usage records, payment and subscription status (plan tier, subscription period), and sign-up route information (where the user signed up through a share link, the identifier of that share link). 3. Upon payment (once introduced): payment-related information processed through a payment gateway (PG). The Company does not directly store payment credentials such as card numbers. 4. Automatically generated or collected in the course of using the Service: IP address, browser information (User-Agent), information collected through automatic collection tools such as cookies, access date and time, service usage records, and records of abusive use. For records of shared-page views, reports on shared content, and advertisement banner clicks, the Company converts the IP address into a one-way hash value and stores only that value; the original IP address is not stored. However, IP addresses may be processed and logged by the Company's hosting and security infrastructure providers. 5. When a report on shared content is received: the reason for the report, the details of the report (where entered by the user), and the original text of the shared note at the time the report was received.

Article 2 (Purposes of Use) Member identification and authentication; generation and delivery of AI summaries; management of usage records and provision of access to them; processing of paid transactions, management of subscriptions and settlement; responding to inquiries and providing notices; service improvement and prevention of abusive use; receipt and handling of reports on shared content and verification of repeated violations; and prevention of duplicate counting of shared-page views and advertisement clicks.

Article 3 (Retention and Use Period) 1. As a rule, personal information is destroyed without delay upon withdrawal of membership. 2. Summary delivery records (digests) are retained for up to 30 days and then automatically deleted. 3. Retention required by law: records on contracts and withdrawal of subscription, 5 years; records on payment and the supply of goods, 5 years; records on consumer complaints and dispute resolution, 3 years (each under the Act on the Consumer Protection in Electronic Commerce, Etc. (전자상거래법)); log-in records, 3 months (Protection of Communications Secrets Act (통신비밀보호법)). 4. Pro trial usage history (a one-way hash value of the email address, the social login platform identifier, and the time of use) is retained for the purpose of preventing duplicate trials, and is preserved even after withdrawal of membership until the Service is discontinued. 5. Shared-page view records (including the visitor identification hash) are automatically deleted within 24 hours of collection, for the purpose of preventing duplicate view counting. 6. Records of reports on shared content (the contents of the report, the original text of the shared note at the time the report was received, and the reporter identification hash) are retained for one year from the date of receipt for the purpose of handling reports and verifying repeated violations, and are then destroyed. 7. Among advertisement banner click records, the visitor identification hash and browser information are deleted once 90 days have elapsed from the date of collection; click statistics from which identifying information has been removed (advertisement placement, referring screen, click date and time) are retained for the analysis of advertising performance.

Article 4 (Provision to Third Parties) The Company does not provide personal information to third parties beyond the scope of the stated purposes. Exceptions apply where there is a statutory basis or a lawful request from an investigative agency.

Article 5 (Outsourcing of Processing) The Company outsources processing as follows (processing is limited to the scope of the outsourced purpose): Google LLC (social login authentication, retrieval of YouTube video information, AI summarization (Gemini) — name, email address, profile identifier, and information on the videos to be summarized), Supabase Inc. (database and authentication infrastructure — account and service usage information), Cloudflare Inc. (hosting and execution infrastructure, email delivery processing, and storage of data backups — service usage information, recipient email addresses, and delivered content), TranscriptAPI and Supadata (extraction of video transcripts — only the identifier of the video to be summarized is transmitted; no personal information of users is included), Telegram (delivery of messenger notifications, where integrated — Telegram identifier and delivered content), and Toss Payments Inc. (processing of paid transactions, once introduced — payment-related information).

Article 6 (Cross-Border Transfer of Personal Information) For the outsourced processing and storage necessary to provide the Service, the Company transfers personal information overseas as set out below, and discloses such transfers through this Privacy Policy pursuant to Article 28-8(1)3 of the Personal Information Protection Act (개인정보 보호법). In every case, the time and method of transfer are "transmission from time to time over an information and communications network at the time the Service is used."

1. Google LLC (United States) — Items transferred: name, email address, profile identifier, and information on the videos to be summarized / Purpose: social login authentication and generation of AI summaries / Retention period: until withdrawal of membership or termination of the outsourcing agreement / Contact: privacy.google.com

2. Supabase, Inc. (United States) — Items transferred: account information and all service usage records / Purpose: operation of database and authentication infrastructure / Retention period: until withdrawal of membership or termination of the outsourcing agreement / Contact: supabase.com/privacy

3. Cloudflare, Inc. (United States) — Items transferred: IP address, service usage records, recipient email addresses and delivered content, and data backups / Purpose: hosting and security, email delivery processing, and backup storage / Retention period: until withdrawal of membership or termination of the outsourcing agreement (backups, until the end of the backup retention period) / Contact: cloudflare.com/privacypolicy

4. Telegram (United Arab Emirates) — Items transferred: Telegram chat ID and delivered content (only where messenger integration is used) / Purpose: delivery of messenger notifications / Retention period: until the integration is disconnected or membership is withdrawn / Contact: telegram.org/privacy

A user who does not wish to have personal information transferred overseas may discontinue use of the Service, for example by withdrawing membership; in that case the Service cannot be provided.

Article 7 (Rights of Users) 1. Users may access and correct their personal information at any time, and may request deletion through the settings within the Service or by withdrawing membership. 2. Users may request suspension of processing (in which case use of the Service may be restricted). 3. These rights may be exercised through the functions provided within the Service or by contacting the Chief Privacy Officer.

Article 8 (Destruction) 1. Personal information is destroyed without delay once it is no longer necessary, such as where the retention period has elapsed or the purpose of processing has been achieved. 2. Electronic files are deleted by a method that renders them unrecoverable.

Article 9 (Security Measures) Management of access privileges, encryption of data in transit, authentication-based access control, and similar measures.

Article 9-2 (Installation, Operation and Refusal of Automatic Personal Information Collection Tools) 1. The Company uses cookies and browser local storage in order to provide the Service, including maintaining the signed-in state. 2. Users may allow, review, or refuse the storage of cookies through their web browser settings. However, if the storage of cookies and similar items is refused, services that require signing in may become unavailable. 3. The Company includes third-party content on the Service screens, such as advertisement banners on free-plan screens and the YouTube video playback feature on share pages. In the course of this, those third parties may set their own cookies in the user's browser or collect information through them. The Company cannot read those cookies or access that information, and such processing is governed by the privacy policy of each third party. The third parties concerned are as follows: (i) advertisement banners: Coupang Partners (Coupang Corp.); (ii) YouTube video playback: Google LLC. 4. Users may also refuse the storage of the third-party cookies referred to in paragraph 3 through the browser settings described in paragraph 2. In that case, the display of advertisements or the playback of videos may be limited, but there is no impediment to the use of other parts of the Service.

Article 10 (Chief Privacy Officer and Grievance Handling) 1. Chief Privacy Officer: Haesol Kim (Representative), contact: support@dailyvideodigest.com. 2. Department receiving requests for access, correction, deletion, or suspension of processing of personal information, and handling grievances: Customer Support (Operations), contact: support@dailyvideodigest.com.

Article 11 (Duty to Notify) Where the Company amends this Privacy Policy, it will state the reason for the amendment and the effective date and give notice within the Service at least 7 days before the effective date. However, where there is a material change affecting users' rights, such as a change to the categories of information collected or the purposes of use, notice will be given at least 30 days in advance.

The Korean version of this Privacy Policy is the authoritative text; in the event of any discrepancy in interpretation between a translated version and the Korean version, the Korean version prevails. This English version is provided as a reference translation.

Addendum: This Privacy Policy takes effect on 2026-07-14.